kentbet[.]cc

This domain, kentbet.cc, is flagged as a generic phishing site designed to harvest financial login credentials. Analysis indicates no direct association with known brand impersonation campaigns or crypto drainer kits, suggesting a standalone credential theft operation. The phishing page likely mimicked banking or betting platforms, though no specific brand was confirmed in available telemetry. Infrastructure analysis reveals the domain was registered on February 21, 2026, with a creation date anomaly suggesting potential domain spoofing or backdating. It resolves to IP address 188.114.97.3, hosted on Cloudflare’s network (AS13335). VirusTotal detections show 12 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is not currently listed in Google Safe Browsing. The SSL certificate is classified as WE1, a low-trust category often associated with automated or low-cost certificate issuance. As of the latest scan, kentbet.cc is offline, likely due to takedown or abandonment. The domain’s Cloudflare IP and SSL certificate remain active, posing residual risk for potential reuse in future campaigns. Organizations should monitor for re-emergence on the same infrastructure and block the IP at perimeter defenses. Users who accessed the domain should reset credentials for any financial or sensitive accounts, particularly if login attempts were made. The elevated risk classification stems from the domain’s recent activity and detection rate, despite its current offline status.